This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa File: HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa (raw, json) Hash identifier: rD8uKvcs46K8PbUVJgx0QG2NecMmJWf53Xg6anGyvsM= Subject key identifier: 1C:37:49:AC:60:0E:08:E4:45:C9:58:32:C6:B3:5A:35:E1:76:B7:C4 Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d Certificate serial: 019B7E3884F0788E8A1D15E69F82E729E587 Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41198 IP address blocks: 194.140.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:84:f0:78:8e:8a:1d:15:e6:9f:82:e7:29:e5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c3749ac600e08e445c95832c6b35a35e176b7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:7c:40:31:04:28:04:e4:49:7b:24:d1:5d: 37:b0:28:b3:0c:d9:09:e1:b4:9c:0e:88:d9:3d:c9: bd:8f:2e:64:dd:eb:9f:57:4d:da:5c:13:54:26:c7: 75:7f:4d:fd:22:49:a8:f9:7b:ab:e0:58:40:00:a1: 7a:8c:1c:75:40:dd:13:80:29:f6:d9:a8:5a:94:35: 73:12:d7:1e:f1:4e:b6:26:b7:84:62:77:2f:a4:1a: 05:14:c1:53:d1:ba:84:b1:89:d2:43:63:47:85:d3: d3:f0:3e:62:89:8e:b4:4a:8b:f0:93:c8:d7:bc:76: b5:06:15:90:3d:3e:59:63:3a:8c:16:fa:9c:19:60: 6e:ab:69:61:df:25:cc:7a:73:7d:f0:c8:58:03:d7: e8:34:20:e8:ef:a6:80:ad:52:7a:da:0d:3f:07:12: 8c:48:ff:6e:ea:81:de:da:81:8a:8c:bb:8a:2d:5f: 25:2b:9d:8c:ac:77:33:70:2e:2b:9f:60:12:1b:39: e3:f0:eb:66:b9:18:63:df:15:41:34:26:d5:e2:34: 45:3a:db:ed:e4:44:e3:34:8d:2c:70:05:a6:7d:b6: 88:3b:00:00:0a:c4:44:cb:b5:ed:9b:58:42:60:17: 50:da:b0:bd:b7:42:5d:ea:c1:00:13:db:69:b9:53: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:49:AC:60:0E:08:E4:45:C9:58:32:C6:B3:5A:35:E1:76:B7:C4 X509v3 Authority Key Identifier: keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:bc:14:09:be:3e:3e:ab:63:20:fa:6d:93:2f:d1:4a:b8:6e: ec:67:5d:64:b2:c5:e5:9f:28:82:ba:71:63:74:0c:94:0f:31: 2d:1e:16:60:6f:aa:1f:d6:ef:af:d3:72:2c:d0:96:7a:ed:9c: b9:bd:c5:c7:a9:0e:1c:40:a7:ea:f0:b7:cb:7f:d7:97:ee:4e: a9:70:5a:92:3a:ae:61:a3:b6:5f:35:a6:80:c3:94:40:98:0d: f8:79:bc:48:5c:4f:7f:6c:f7:bf:c5:59:93:2c:25:15:fa:9f: 15:a3:71:ca:1f:32:53:b1:91:d3:05:fa:60:7e:8c:34:aa:6c: be:99:04:b4:36:05:62:32:3c:ae:35:34:72:87:93:91:41:87: 2e:8b:18:ee:0b:2f:6a:22:53:e1:03:cc:66:40:08:9b:2b:ee: 16:3f:c3:1a:ba:cf:c4:5c:f3:43:4a:e6:83:af:7b:6f:dd:ed: a2:fe:07:7c:a0:d2:d4:45:9d:56:50:c2:69:e3:0d:d8:cb:72: e5:15:24:b3:e0:d9:fe:cf:ac:1a:16:ea:87:69:68:81:ea:1b: f4:51:aa:32:b5:cf:32:d0:0d:a4:fc:87:e9:c5:9b:89:2f:51: 23:f7:10:73:1f:d5:c4:27:4d:25:80:8b:e1:9f:e7:2b:53:c0: 12:dc:2f:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OITweI6KHRXmn4LnKeWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzNiODVhN2JlZmJiNDQ5MGQ3YWM4NTJlYjhiZTg0YmY5 MzhiNGQwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzM3NDlhYzYwMGUwOGU0NDVjOTU4MzJjNmIzNWEzNWUxNzZiN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsF8QDEEKATkSXsk0V03sCizDNkJ 4bScDojZPcm9jy5k3eufV03aXBNUJsd1f039Ikmo+Xur4FhAAKF6jBx1QN0TgCn2 2ahalDVzEtce8U62JreEYncvpBoFFMFT0bqEsYnSQ2NHhdPT8D5iiY60Sovwk8jX vHa1BhWQPT5ZYzqMFvqcGWBuq2lh3yXMenN98MhYA9foNCDo76aArVJ62g0/BxKM SP9u6oHe2oGKjLuKLV8lK52MrHczcC4rn2ASGznj8OtmuRhj3xVBNCbV4jRFOtvt 5ETjNI0scAWmfbaIOwAACsREy7Xtm1hCYBdQ2rC9t0Jd6sEAE9tpuVMZuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBw3SaxgDgjkRclYMsazWjXhdrfEMB8GA1UdIwQY MBaAFIfDuFp777tEkNeshS64voS/k4tNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAt NzhlYzgwMjMwNjhmLzEvSERkSnJHQU9DT1JGeVZneXhyTmFOZUYydDhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAtNzhlYzgwMjMwNjhm LzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoz+MA0G CSqGSIb3DQEBCwUAA4IBAQCfvBQJvj4+q2Mg+m2TL9FKuG7sZ11kssXlnyiCunFj dAyUDzEtHhZgb6of1u+v03Is0JZ67Zy5vcXHqQ4cQKfq8LfLf9eX7k6pcFqSOq5h o7ZfNaaAw5RAmA34ebxIXE9/bPe/xVmTLCUV+p8Vo3HKHzJTsZHTBfpgfow0qmy+ mQS0NgViMjyuNTRyh5ORQYcuixjuCy9qIlPhA8xmQAibK+4WP8Maus/EXPNDSuaD r3tv3e2i/gd8oNLURZ1WUMJp4w3Yy3LlFSSz4Nn+z6waFuqHaWiB6hv0Uaoytc8y 0A2k/IfpxZuJL1Ej9xBzH9XEJ00lgIvhn+crU8AS3C+R -----END CERTIFICATE-----Generated at Sun Jan 11 17:51:06 2026 by rpki-client